diff --git a/.gitignore b/.gitignore
index 0adae96..4e4f490 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1 @@
-SOURCES/nginx-1.20.0.tar.gz
+SOURCES/nginx-1.20.1.tar.gz
diff --git a/.nginx.metadata b/.nginx.metadata
index ed7f7a9..743405a 100644
--- a/.nginx.metadata
+++ b/.nginx.metadata
@@ -1 +1 @@
-71dc4916e9ac7e15b03f7ea71577f72e0dd5dff1 SOURCES/nginx-1.20.0.tar.gz
+6b4ab4eff3c617e133819f43fdfc14708e593a79 SOURCES/nginx-1.20.1.tar.gz
diff --git a/SPECS/nginx.spec b/SPECS/nginx.spec
index f028210..2a706e4 100644
--- a/SPECS/nginx.spec
+++ b/SPECS/nginx.spec
@@ -29,8 +29,8 @@
 
 Name:              nginx
 Epoch:             1
-Version:           1.20.0
-Release:           4%{?dist}
+Version:           1.20.1
+Release:           1%{?dist}
 
 Summary:           A high performance web server and reverse proxy server
 Group:             System Environment/Daemons
@@ -539,6 +539,9 @@ fi
 %{nginx_srcdir}/
 
 %changelog
+* Tue Dec 21 2021 Joe Orton <jorton@redhat.com> - 1:1.20.1-1
+- rebase to 1.20.1 (addressing CVE-2021-23017)
+
 * Wed Dec  1 2021 Joe Orton <jorton@redhat.com> - 1:1.20.0-4
 - add delaycompress to logrotate config (#2015243)